Head of Security

```html

About the role

As Head of Security, you are the security owner for Heartbeat AI GmbH and lead Team Trust, the security team inside the Core Platforms domain. You protect connected energy systems in people's homes that are part of critical energy infrastructure driving the transition towards renewable energy. This is a hands-on leadership role where you build the team and framework while staying close enough to the technology to make good calls yourself.

What you'll do

• Lead Team Trust: direction, hiring, growth, health and mentoring.
• Protect cloud, applications, and connected hardware in customers' homes (Cloud and IoT Security).
• Own cybersecurity frameworks and regulations that apply to energy companies (Risk and Compliance).
• Manage internal permissions and secure development at scale (Identity and Access Management).
• Build security capabilities developers use by default (Security as a Product).
• Make security risk concrete for non-technical decision makers, up to C-level.

What you'll need

• Several years of experience in security engineering or security leadership, including leading or mentoring engineers.
• Technical background in cloud security, preferably Google Cloud Platform, with depth to reason about infrastructure, CI/CD, identity, and application security.
• Experience building a security framework from scratch or close to it, with limited initial resources and clear view of priorities.
• Familiarity with cybersecurity frameworks such as NIST CSF and ISO 27001, and ideally with critical infrastructure rules like NIS2 and KRITIS.
• Strong communication skills to make security risk concrete for engineers, product managers, and senior stakeholders.
• Pragmatic, outcome-oriented way of working.
• Excellent English communication skills; German is a plus.

Nice to have

• Hands-on coding experience.
• Experience with security in AI-assisted engineering setups, including agentic workflows and their guardrails.
• Experience running or coordinating security incident response.
• Experience with security and IT controls in a company preparing for public listing.
• Experience in a scale-up environment with roughly 100 to 1000 employees.
• Interest in climate tech and renewable energy.

What they offer

• International, dynamic team working on climate impact and energy transition.
• Direct contact with core decision-makers and flat hierarchies with short decision paths.
• Remote work Germany-wide with flexible policy; offices in Hamburg, Berlin and Munich available.
• EGYM Wellpass for health and wellness benefits.
• Discounts and benefits via Futurebens.
• Job bike leasing (city bike or e-bike).

```